{"id":"CVE-2022-1993","published":"2022-06-08T13:55:11Z","modified":"2024-08-03T00:24:44Z","title":"Path Traversal in gogs/gogs","vendor":"gogs","product":"gogs/gogs","tier":"tail","description":{"text":"Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.","provenance":"source","from":"CVE.org"},"cvss":{"score":8.1,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.36725,"percentile":0.98496,"provenance":"source"},"cwes":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory"}],"references":[{"url":"https://huntr.dev/bounties/22f9c074-cf60-4c67-b5c4-72fdf312609d","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/gogs/gogs/commit/9bf748b6c4c9a17d3aa77f6b9abcfae65451febf","tags":["x_refsource_MISC"]}],"priority":{"score":25.4,"factors":[{"name":"EPSS percentile","points":19.7},{"name":"CVSS severity","points":5.67}]},"vendorSlug":"gogs","affectedVersions":[{"vendor":"gogs","product":"gogs/gogs","versions":[">= unspecified, < 0.12.9"]}],"affected":[{"ecosystem":"Go","package":"gogs.io/gogs","vulnerableRanges":["<0.12.9"],"patched":["0.12.9"],"from":["GHSA-6vcc-v9vw-g2x5","GO-2022-0562"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-5965","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-gogs-gogs-cwe-22"}}